Advisories · Technology
Fedora.
Every CVE that names Fedora among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.4 Medium
Out-of-bounds read when setting hmac data
- kernel
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.4 Medium
Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c
- Kernel
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 3.1 Low
Processing sftp server read may cause null dereference
- libssh
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 4.7 Medium
Possibility of deadlock in libbpf function sock_hash_delete_elem
- kernel
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 4.7 Medium
W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
- w3m
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.5 Medium
Segmentation fault in fax3encode in libtiff/tif_fax3.c
- libtiff
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.5 High
Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.3 Medium
Race condition exists in the key generation and rotation functionality
- tang
- Red Hat Enterprise Linux 7
- Race condition
- CVSS 7.8 High
Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
- kernel
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Heap-buffer-overflow in src/formats_i.c
- sox
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Heap-buffer-overflow in src/hcom.c
- sox
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.2 Medium
Floating point exception in src/voc.c
- sox
- Red Hat Enterprise Linux 6
- CWE-1077
- CVSS 6.2 Medium
Floating point exception in src/aiff.c
- sox
- Red Hat Enterprise Linux 6
- CWE-1077
- CVSS 9.8 CriticalCritical · CVSS 9+
Tree connection race condition remote code execution vulnerability
- kernel
- Red Hat Enterprise Linux 6
- Race condition
- CVSS 9.0 CriticalCritical · CVSS 9+
Session race condition remote code execution vulnerability
- kernel
- Red Hat Enterprise Linux 6
- Race condition
- CVSS 5.0 Medium
Arbitrary file write
- libreoffice
- Red Hat Enterprise Linux 6
- CWE-20
- CVSS 6.5 Medium
Crash due to a null pointer dereference in the dn_nsp_send function
- kernel
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.5 Medium
Libtiff: null pointer dereference in tif_dir.c
- Libtiff
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 4.7 Medium
Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
- kernel
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.5 High
Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c
- mod_fcgid
- Red Hat Enterprise Linux 7
- Memory corruption